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Dcacription 

DEVICE AND METHOD FOR PARAMETER! Z ABLE CONTROLLING 

[0001] This application is the national phase under 35 U.S.C. § 
371 of PCT International Application No. PCT/EP2004 / 006532 
which has an International filing date of June 17, 2 004, which 
designated the United States of America and which claims 
priority on German Patent Application number 03014878.7 filed 
June 30, 2 003, the entire contents of which are hereby 
incorporated herein by reference. 

Field 

[0002] The present invention generally relates to a control 
device . For example, it may relate to one having a plurality of 
inputs for respectively receiving an input real value, a 
plurality of outputs for respectively outputting a digital 
output value, a memory for storing setpoint values relating to 
the inputs and outputs, and an allocator for allocating a 
digital output value to one of the digital outputs as a 
function of a comparison of at least one of the input real 
values with a corresponding setpoint value. The present 
invention also generally relates to a corresponding method for 
controlling equipment . 

Background 

[0003] In many applications of control technology, outputs Yj 
are switched on or off as a function of inputs Xi . A control 
device is in this case characterized by the number of outputs 
jmax and the number of inputs ima X . With respectively two inputs 
and outputs, i.e. jmax = 2 and imax = 2, sixteen different states 
are in principle conceivable. Correspondingly for controllers 
with eighteen input and outputs, which are widely used in 
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control technology, more than 260,000 different states are 
already possible. 

[0004] In equipment produced to date, all the inputs and 
outputs are evaluated by programmed technology. This, however, 
presents the following disadvantages with an increasing number 
of inputs and outputs (IOs) : There is a great need for ROM and 
RAM. Furthermore, the parameterization table which increases 
exponentially in size requires a very large EEPROM, long 
reading times etc. The large number of states furthermore 
requires very complex parameterization and entails very long 
runtimes. Especially for safety technology, the latter is a 
great problem as regards emergency stop reaction times and 
maximum test times for the second fault occurrence time. 

[0005] A controller of this high complexity is known, for 
example, from Pilz under the reference "PNOZ MULT I " . A large 
part of the logic is in this case embodied in hardware. This is 
correspondingly configured extensively owing to redundancy and 
diversity, associated with an SFF level of more than 90% for 
the KAT4 safety standard. Two different controller types are in 
this case used with different firmware. The purpose of this is 
that the faster controller carries out the control functions 
and the slower controller is used for the monitoring. 

[0006] US 4,510,602 discloses a programmable logic device which 

compriocG includes a multiplicity of memory devices, 

instruction words and masking words being stored in each of 
these memory devices, the words respectively conaiating 

includinge # a multiplicity of bits. By moano way of a 

comparator unit and a comparer unit, a comparison of a word 
found on a data bus is carried out with an instruction word 
contained in a memory and a masking word. The data bus is in 
this case connected to inputs and outputs of the device. 
Depending on a comparison carried out, a marker unit which 
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transfers a marker signal to outputs of the device is activated 
by the comparator unit. The individual bits of the instruction 
words and the masking words can take the digital states "1" and 
" 0 " . 

[0007] US 5,623,680 discloses a state machine, which compriaca 
includes a memory in which logic specifications are stored. The 
changes of the outputs are determined by these logic 
specifications as a function of predetermined combinations of 
input parameters, and a change of states is carried out as a 
function of stored logic states of the input parameters. The 
state specifications are in this case formed by separate 8-bit_ 
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words and combined with an input vector by a logical AND 
operation. The input vectors are in this case undescribed and 
characterize that by that only a single state which is 
specified by a further vector can determine a state transition. 

[0008] For their part, the present Applicant sells safety 
equipment of the Siguard series on the market, which makes do 
with one firmware and one controller type, although master- 
slave operation is necessary in which both controllers execute 
all the control functions and therefore in principle require 
double the runtime compared with the aforementioned equipment. 
This di oadvontage — is theref ore muot — be compensated for by a 
high-performance algorithm. 

SUMMARY 

[0009] It is therefore an object of at least one embodiment of 
the present invention to provide a less elaborate controller 
and a corresponding method for safety technology. 

[0009] —According to at least one embodiment of the invention, 
an thio object may be- 3r& achieved by a control device having a 
plurality of inputs for respectively receiving an input real 
value, a plurality of outputs for respectively outputting a 
digital output value, a memory for storing setpoint values 
relating to the inputs and outputs, and an allocator for 
allocating a digital output value to one of the digital outputs 
as a function of a comparison of at least one of the input real 

values with a corresponding setpoint value . A- wherein — an 

independence state value can be applied to at least one of the 
setpoint values in the memor y . Further , - — and the allocation of 
a digital output value to one of the digital outputs can be 
carried out by the allocator independently of the at least one 
input real value whose allocated setpoint value has the 
independence state value. The setpoint values respectively have 
one of the state values 1, 0 and independence state value. In 
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this way, for example, it is possible to produce the binary- 
states "TRUE" and " FALSE" as well as a state 
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[0010] which is insignificant for the output result. 

[0011] At least one embodiment of t^ he invention also relates 
to a method for controlling equipment by receiving a plurality 
of input real values, providing setpoint values relating to 
input and outputs, establishing a digital output value as a 
function of a comparison of at least one of the input real 
values with a corresponding one of the setpoint values, 
outputting the digital output value, applying an independence 
state value to. at least one of the setpoint values, and 
establishing the digital output value independently of the at 
least one input real value whose allocated setpoint value has 
the independence state value. The setpoint values respectively 
have one of the state values 1, 0 and independence state value. 
In this way, for example, it is possible to produce the binary 
states "TRUE" and "FALSE" as well as a state which is 
insignificant for the output result. 

[0012] In safety technology, the error susceptibility and 
verif iability of the algorithm are of prime importance. If the 
computing outlay is reduced according to at least one 
embodiment of the invention, a reliable control function can 
therefore be readily achieved in master-slave operation. 

[0013] The control device according to at least one embodiment 
of the invention may comprioc — include a first evaluator for 
converting input raw values into digital input values for the 
further processing as input real values. This makes it 
possible, for example, to classify analog input signals as an 
active or inactive input. 

[0014] A second evaluator may furthermore be provided in the 
control device, which is connected downstream of the first 
evaluator. This allows the digital input values to be allocated 
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to logical input states for the further processing as input 
real values . 
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[0015] Preferably, the setpoint values respectively have one of 
the state values 1, 0 and independence state value. In this 
way, for example, it is possible to produce the binary states 
"TRUE" and " FALSE" as well as a state which is insignificant 
for the output result. 

[0016] A plurality of sets of setpoint values may b o aro 
preferably stored , for example, respectively for an output 
value or set of output values in the memory . In this way, a 
plurality of parameter izations can be stored simultaneously in 
the equipment . 

[0017] The control device according to at least one embodiment 
of the invention may have a safety instrument by which the 
equipment to be controlled can be switched to a safety state. 
For example, it may be switched to the safety state if the 
output real values deviate from the corresponding setpoint 
values for more than a predetermined time. In a special example 

of this, the control device may comprioc include two 

controllers which both execute the algorithm and store all 
fulfilled parameterizations as well as the output vector Yj in 
binary form. These stored values are compared .in each cycle. If 
they deviate for a time which is longer than a predetermined 
maximum time, then the equipment to be controlled is switched 
to a safe state. 

[0018] The safety device may be optimized by checking the sets 
of setpoint values with a check sum at fixed time intervals. In 
particular, a setpoint value matrix i.e. a fixed 
parameterization, which is stored in the memory, may be secured 
by a cyclic CRC (cyclic redundancy check sum) and verified at 
fixed time intervals in order to discover errors in the matrix 
S or in the memory. In this way, a variable function can be 
checked for errors straightforwardly. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

[0019] Embodiments of t* Phe present invention will now be 
explained in more detail with the aid of the appended drawings, 
in which: 
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FIG 1 shows an outline flow chart of the preprocessing of the 
input real values; and 

FIG 2 shows a logic diagram for the allocation of output states 
according to at least one embodiment of the invention. 

DETAILED DESCRIPTION OF THE EXAMPLE EMBODIMENTS 

[0020] The exaemp 1 e ary embodiments described in detail below 
represent preferred embodiments of the present invention. 

[0021] The outputs Y of the control-safety equipment are the 
result of a switching function H with input X: 

Y = H(X) 

[0022] The input X, or the plurality of inputs X i; in this case 
may respectively have the following states independently of 
its/ their function : 

0 ("FALSE") input must be inactive 

Xi = 1 ("TRUE") input must be active 

D ( " DONTC ARE " ) input state may be anything 

[0023] In control technology, an active output state Yj is 
generally reached for precisely one or very few input state 
vectors. For most of the input state vectors Xi, the output or 
outputs are inactively configured. With uncorrelated inputs, 
i.e. inputs that do not affect one another, for example 
operating selector switch, muting, key switch or the like, 
there are usually at most jmax input state vectors for jmax 
active outputs Yj . 

[002 4 } — If the inputs are correlated, however, then: 
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[0024] 

J max 

*i < £<nz,) 

[0025] N umber of the active output states l 

[0026] Here, Zi corresponds to the number of correlations of 
the inputs Xi . In the limiting case of uncorrelated inputs, Z = 
1 since the inputs are then only correlated with themselves. 

[0027] The evaluation of the inputs is carried out in two 
stages according to this example according to at least one 
embodiment o f the invention, as indicated in FIG 1. Raw input 
data Ri, for example analog signals or digital signals of any 
level, are first subjected to a physical evaluation. Here, for 
example, the allocation Xi = 1 is made when the corresponding 
input is active, and Xi = 0 when the input is inactive. 

[0028] In a second step S2 , the digital input values Xi are 
logically evaluated. Each input therefore has a function ID, 
for example IDi = ID_P0WERBUTT0N . A logical input state or 
function value Fi is assigned to each digital input value Xi . 
In the example, Fi = 1 would apply if the power button has been 
actuated successfully, and Fi = 0 would apply if the power 
button has not been actuated or has not been actuated 
successfully . 

[0029] -A logical allocation is carried out in the further step 
S3, each real value Fi being compared with a setpoint value Si. 
A corresponding output value Yj results from this comparison. 
Preferably, the controller is configured so that n max different 
parameterizations can be stored in it. . Thu-±-s_^ moano — that for 
all the nmax parameterizations, a set of setpoint values Si, n is 
respectively stored. They have the values_ 
[0029] 

0 ("FALSE") input must be inactive 
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Si, n 1 ("TRUE") 

D ( " DONTCARE " ) 



input must be active 

input state may be anything 
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[0030] FIG 2 shows a flow chart for determining the output 
states Yj . In an initialization step S4, the number of the 
parameter set is put at n = 1 and the output value Yj is put at 
zero. In a further step S5, the logical input states Fi for 
each parameterization n are compared with the allocated 
threshold value Si, n (comparison operator "=="). All the 
comparisons are combined by the AND operator 11 &&" . If the 
overall result of the comparisons is "TRUE", then the 
respective output Yj receives the value of the logic operation 
"Yj OR Yj, n " . In this case, Yj, n corresponds to the value stored 
as a setpoint value together with Si, n - 

[0031] The comparison routine of step S5 is repeated n times 
according to step S6. After this, the output value assignment 
is ended according to step S7 . 

[0032] For each parameterization, the output Yj with Yj, n = 1 
may then be connected up or activated. Otherwise, the 
respective output Yj is inactive. 

[0033] According to at least one embodiment of the invention, 
not every real value Fi is compared with the corresponding 
setpoint value Si /n in step S5 . Rather, a comparison is only 
carried out if the setpoint value Si, n does not have the value 

"D" . This can avoid a multiplicity of comparison operations. 
The total runtime for determining the output states is 
correspondingly reduced . 

[0034] If the inputs are mutually independent, for example in 
the case of parallel switches, then the number of 
parameterizations is equal to the total number of outputs 

jmax- If the inputs are dependent on one another, however, for 
example switches connected in series, then two 
parameterizations may for example be necessary for one output. 
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[0035] In a specific example, eleven independent inputs are 
applied to the controller in order to control four outputs. 
Accordingly, four different parameterizations must be stored in 
the controller. 

[0036] Example embodiments being thus described, it will be 

obvious that the same may be varied in many ways . Such 

variations are not to be regarded as a departure from the 
spirit and scope of the present invention, and all such 
modifications as would be obvious to one skilled in the art are 
intended to be included within the scope of the following 
claims . 
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